A proposal for generating shared RSA parameters

This paper describes how two parties can jointly generate the parameters for the RSA encryption system. The proposed protocol generates a public modulus number, without the parties knowing the factorization of that number. Although the encryption exponent is publicly known, each party holds only a port of the exponent for decrypting the received messages